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AuC generates random number Rand, 
generates verification word for client with 
shared key Kc, Rand and Client ID, generates 
session key between Client and SP, and 
encrypts session key respectively with shared 
keys between Client and SP. 
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SoftX keeps verification word 
and two encrypted session keys, 
and takes only random number 
Rand as response message. 
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SP requests terminal to provide 
information on both security mechanisms 
and priorities 



Client calculates verification word 
with random number Rand, Client ID, 
and shared key Kc, and encapsulates 
the information on security 
mechanisms , and priorities of terminal 
into registration message. 
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Soft switch compares two authentication 
words for consistency: if consistent, then 
authentication succeeds and session keys 
Kc,sp encrypted with Kc nd Ksp sent from 
AuC are taken as response message, otherwise 
message 3 is retransmitted. 
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SP decrypts session key Kc,sp encrypted with 
Ksp, returns session key Kc,sp encrypted with 
Kc to Client, choose security mechanism for 
subsequent communication according to 
security mechanism parameter information of 
Client, and returns to terminal choice result 
together with security mechanism information 
sent from terminal, and MAC is calculated with 
Kc,sp for whole message. 
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Client decrypts session key Kc,sp encrypted by 
AuC with Kc, and authenticates message with 
Kc.sp as to source and integrity to accomplish 
authentication for sp; Client checks whether list 
of security mechanisms returned from so is 
correct to verify message has been not modified 
midway; and Client receives security mechanism 
chosen by sp, and registers again if authentication 
fails. 
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